Microsoft Sentinel SME

GSPANN

11 - 21 years

10 - 20 Lacs

hyderabad

Posted:3 weeks ago| Platform:

Apply

Skills Required

continuous integration soc scanning ci/cd sme siem microsoft operations devops json arm deployment sentinel cd rest github cloud security cyber security network security ir azure cloud framework servicenow compliance soar threat intelligence investigation terraform alignment

Work Mode

Work from Office

Job Type

Full Time

Job Description

SUMMARY

Architect, deploy, configure, and optimize Microsoft Sentinel.
Manage data connectors, analytics rules, UEBA, watchlists, content hub, and governance.
Develop and tune KQL rules, correlation logic, and UEBA use cases.
Map detection content to MITRE ATT&CK, NIST CSF, CIS, and Zero Trust frameworks
Build and optimize Logic Apps playbooks for automated alert enrichment, response, ticketing, containment, and orchestration.
Conduct proactive threat hunting across Sentinel, Defender XDR, and integrated telemetry sources using KQL, TI feeds, IOC matching, and behavioural analytics.
Support Tier 2/3 investigations, perform forensics, lead containment/remediation, and create incident post-mortems.
Integrate Sentinel with Defender Suite, ServiceNow/Jira, EDR, vulnerability scanners, IAM/IDP platforms, network security tools, and third-party APIs.
Develop dashboards and reports for ISO 27001, SOC 2, PCI-DSS, GDPR, CCPA, NIST 800-53, HIPAA compliance.
Implement ingestion strategies, data tiering, RBAC, retention policies, and continuous platform health management.
Participate in co-managed SOC model, lead onboarding workshops, provide stakeholder reporting, and coach operational teams.
Maintain detection quality, evolve rule stacks, integrate threat intel, maintain Sentinel-as-Code, and support operational maturity.

Requirements

7 10+ years in Cybersecurity
Hands-on Sentinel/XDR/SOAR experience
SOC Operations experience
Managed SOC / MSSP / Multi-Tenant experience
Microsoft Sentinel SIEM
KQL Querying & Detection Engineering
SOAR (Logic Apps Automation)
Microsoft Defender XDR Suite (Identity, Endpoint, M365, OT/IoT optional)
Threat Intelligence & MITRE ATT&CK alignment
IR Frameworks (DFIR, Forensics, Playbooks, Runbooks)
Azure Cloud Security + Entra ID
API/REST/JSON Automation
Infrastructure + Network Security Knowledge
DevOps/Sentinel-as-Code (GitHub, ARM, Terraform, CI/CD

Certifications (Preferred)

SC-200, SC-100, AZ-500
CISSP, GCIH, GCIA, CEH, CySA+, AZ-104
Defender, Entra ID, Azure Sentinel relevance

More Jobs at GSPANN

Sr. AWS Data Engineer Gspann Technologies

Bengaluru, Hyderabad, Gurgaon

6 - 11 yrs

INR 15 - 30 Lacs

Hr Operations Consultant

Gurugram

3 - 5 yrs

INR 3 - 6 Lacs

Walk-In drive For Senior & Lead Java Developer on 10th May (Saturday)

Hyderabad

6 - 11 yrs

INR 25 - 35 Lacs

Technical Engagement Manager

Noida, Hyderabad, Gurugram

14 - 18 yrs

INR 25 - 30 Lacs

Senior Data Analyst

Hyderabad, Pune, Delhi / NCR

5 - 10 yrs

INR 15 - 20 Lacs

Mock Interview

Practice Video Interview with JobPe AI

Start DevOps Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.